Legal
Privacy Policy
Last updated: 2 July 2026
This policy explains what information we collect, how we use it, and what rights you have under the New Zealand Privacy Act 2020.
What we collect and why
Contact form submissions
When you contact us through this website, we collect your name, email address, and the content of your message. This information is used solely to respond to your enquiry.
Client portal accounts
If you have been given access to the client portal, your login is managed through Auth0. Auth0 handles authentication securely — we never see or store your password. When you use the portal, we keep a record of your login session so you stay signed in. Sessions automatically end after 30 minutes of inactivity and cannot last longer than 12 hours.
Contact and engagement information
For consulting engagements, we may hold your name, email address, organisation name, and role in order to manage our working relationship and deliver our services.
How we use your information
We use the information we hold to:
- Respond to enquiries submitted through this website
- Provide and manage access to the client portal
- Deliver consulting services and reporting
We do not use your information for advertising, profiling, or any purpose unrelated to our consulting work.
Who we share your information with
We do not sell your information or share it with third parties for their own purposes. Where third parties are involved in delivering our services:
Login is handled by Auth0
We never see or store your password. Auth0 provides secure, industry-standard authentication for the client portal.
Error monitoring is handled by Sentry
We use Sentry to detect and diagnose technical errors in the client portal. When an error occurs during your session, a pseudonymous identifier linked to your account is sent to Sentry so we can trace the problem. Your IP address and browser details are not included. Sentry processes this data solely for the purpose of error diagnosis on our behalf and does not use it for any other purpose.
How we protect your information
The client portal uses HTTPS encryption for all data in transit. Login is handled through Auth0, which provides secure, industry-standard authentication. Report data in the portal is accessible only by authorised users for your organisation.
How long we keep your information
Contact form enquiries are retained for as long as is reasonably needed to manage our relationship. If you would like us to delete information we hold about you, please get in touch using the contact details below.
Your privacy rights
The New Zealand Privacy Act 2020 gives you rights over personal information we hold about you. You can ask us what information we hold, and request corrections if anything is wrong.
To exercise your rights or raise a privacy concern, contact us at support@abbot.net.nz. If you are not satisfied with how we have handled it, you can complain to the Office of the Privacy Commissioner at privacy.org.nz.
Cookies and browser storage
This website does not use advertising, analytics, or tracking cookies.
The client portal uses a session cookie to keep you signed in. This cookie is essential for the portal to function and is removed when you log out or your session expires.
Changes to this policy
If we make significant changes to this policy, we will update the "last updated" date at the top of this page.